This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json) Hash identifier: 5Q3QODCR813LnplZPEeJzyE7+XESRisDrdBNcGDh7Iw= Subject key identifier: 4E:97:64:86:CA:C8:ED:8A:F3:83:CD:86:CB:88:0E:91:D3:55:67:64 Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96 Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96 Certificate serial: 019AF31D3F729A36642B266FE83A2D23052D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: rU9dZ24Q9Z+Djm33KJC5V5o5676jX7uYpKA8gjzYrV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:3f:72:9a:36:64:2b:26:6f:e8:3a:2d:23:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96 Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=4e976486cac8ed8af383cd86cb880e91d3556764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:68:7f:f8:86:e0:96:9f:df:bf:43:59:ba: 5b:ef:4d:11:81:09:19:61:7d:b6:68:e0:c2:1c:0a: 98:37:3c:bd:18:0c:48:a1:f7:89:e3:ee:fe:73:df: 6d:ba:18:cc:10:a8:1d:84:ec:9a:4e:6a:69:28:bc: 4a:9b:cb:8c:f9:6e:88:24:79:e4:8f:b9:2f:ba:95: 43:cb:8f:d8:0f:f0:b3:14:b0:40:78:f0:57:c6:67: 0b:65:ec:99:68:e4:58:80:77:2b:77:56:3b:29:bb: 89:d1:45:1f:98:dc:98:78:69:6d:4a:5a:58:00:98: 8a:01:cf:c5:45:9c:31:3d:3b:2d:45:09:44:e2:e3: d5:5b:f4:7a:fb:df:be:df:50:df:7f:cc:5c:0e:64: 66:b4:6f:24:12:2f:cd:80:d5:7d:6c:68:e8:60:54: 69:b4:48:73:ed:4f:d9:d7:ef:53:05:e3:30:24:ab: 1d:e2:68:6c:14:e8:d7:a8:0e:b1:54:51:d9:1a:ff: 88:e9:b4:c2:25:24:83:2f:21:96:1e:51:0e:58:35: f0:e8:27:6b:42:af:a2:bf:ff:3c:02:12:94:d3:be: 36:7a:5a:9a:08:07:12:cc:f9:28:e6:8f:b6:05:6f: f8:a6:c5:68:d2:73:5b:6a:e0:17:1e:9f:8e:a3:75: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:97:64:86:CA:C8:ED:8A:F3:83:CD:86:CB:88:0E:91:D3:55:67:64 X509v3 Authority Key Identifier: keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e6:b5:d8:77:b0:e2:53:e6:01:46:68:34:5d:c6:e0:d9:c1: 99:46:fd:b8:2e:2b:d6:9c:05:3b:ae:ea:6a:ca:cd:46:56:f2: a0:ad:a2:01:f2:9b:3a:38:0b:51:ec:25:d2:27:2c:14:5b:33: 8a:ea:3b:90:a4:d0:8c:62:0c:d6:20:74:ce:55:f7:47:cb:e6: 64:17:ea:fb:35:db:60:1f:87:c1:0c:9a:4d:49:31:ff:cf:0f: b7:83:1c:fa:07:81:1e:28:da:1e:a9:e4:e6:7f:5b:d5:cc:00: 08:01:13:3a:e0:c0:d6:71:62:d5:8a:30:25:1b:e2:84:2c:e0: 7d:c8:cb:2e:55:15:1a:f7:66:4d:38:e4:5a:29:01:f1:7d:b0: 36:31:93:c4:3c:b6:6f:4f:cd:ed:aa:a0:a3:83:4e:73:48:7d: ed:c4:99:87:c4:c1:9e:5a:47:84:74:a8:37:0e:cf:02:b5:a6: 95:3d:29:d2:61:6c:ee:46:6d:6d:40:1c:1c:6a:59:87:a5:cd: 32:c3:4c:80:67:c2:d9:dc:50:8b:dc:9b:c3:7b:31:c9:ba:de: 40:74:0f:57:ce:26:c8:c9:7b:e0:52:2f:d5:2b:21:6c:1d:d1: 2d:e8:ef:5a:dc:05:da:42:5e:28:19:ba:a5:2b:1b:71:68:50: ff:e7:87:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHT9ymjZkKyZv6DotIwUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzQwNzAyMjQ3YTJmZWFjY2RlYmUxM2E5ODQyY2ZmZDNi NDBjOTYwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD Eyg0ZTk3NjQ4NmNhYzhlZDhhZjM4M2NkODZjYjg4MGU5MWQzNTU2NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdof/iG4Jaf379DWbpb700RgQkZ YX22aODCHAqYNzy9GAxIofeJ4+7+c99tuhjMEKgdhOyaTmppKLxKm8uM+W6IJHnk j7kvupVDy4/YD/CzFLBAePBXxmcLZeyZaORYgHcrd1Y7KbuJ0UUfmNyYeGltSlpY AJiKAc/FRZwxPTstRQlE4uPVW/R6+9++31Dff8xcDmRmtG8kEi/NgNV9bGjoYFRp tEhz7U/Z1+9TBeMwJKsd4mhsFOjXqA6xVFHZGv+I6bTCJSSDLyGWHlEOWDXw6Cdr Qq+iv/88AhKU0742elqaCAcSzPko5o+2BW/4psVo0nNbauAXHp+Oo3UvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6XZIbKyO2K84PNhsuIDpHTVWdkMB8GA1UdIwQY MBaAFO10BwIkei/qzN6+E6mELP/TtAyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYt NWNkYzNmNGI2MmJlLzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYtNWNkYzNmNGI2MmJl LzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOa12Hew 4lPmAUZoNF3G4NnBmUb9uC4r1pwFO67qasrNRlbyoK2iAfKbOjgLUewl0icsFFsz iuo7kKTQjGIM1iB0zlX3R8vmZBfq+zXbYB+HwQyaTUkx/88Pt4Mc+geBHijaHqnk 5n9b1cwACAETOuDA1nFi1YowJRvihCzgfcjLLlUVGvdmTTjkWikB8X2wNjGTxDy2 b0/N7aqgo4NOc0h97cSZh8TBnlpHhHSoNw7PArWmlT0p0mFs7kZtbUAcHGpZh6XN MsNMgGfC2dxQi9ybw3sxybreQHQPV84myMl74FIv1SshbB3RLejvWtwF2kJeKBm6 pSsbcWhQ/+eHAA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:21 2025 by rpki-client